chris

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7878-1 Related CVEs: CVE-2025-64503 CVE-2025-57812 CVE-2025-64524 CVE-2024-47076 CVE-2024-47176 CVE-2023-24805 Upstream summary: It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4897-2 Related CVEs: CVE-2021-20270 CVE-2021-27291 CVE-2015-8557 Upstream summary: USN-4897-1 fixed several vulnerabilities in Pygments. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Ben Caller discovered […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7753-1 Related CVEs: CVE-2025-9375 Upstream summary: Camilo Vera discovered that xmltodict parsed maliciously crafted XML input, contrary to expectations. An attacker could possibly use this issue to cause a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4360-4 Related CVEs: CVE-2020-12762 https://launchpad.net/bugs/1878723 Upstream summary: USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8217-1 Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 Upstream summary: It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3399-1 Related CVEs: CVE-2017-12836 Upstream summary: Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7695-1 Related CVEs: CVE-2022-23837 CVE-2021-30151 Upstream summary: Anas Roubi discovered that Sidekiq did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute a cross-site scripting […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8010-1 Related CVEs: CVE-2025-66418 CVE-2026-21441 CVE-2025-47273 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 CVE-2022-40898  +1 more Upstream summary: Several security issues were discovered in the libraries bundled in pip. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7437-1 Related CVEs: CVE-2022-1325 CVE-2024-26540 Upstream summary: It was discovered that the CImg library did not properly check the size of images before loading them. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8077-1 Related CVEs: CVE-2020-6816 CVE-2021-23980 CVE-2018-7753 CVE-2020-6802 CVE-2020-6817 Upstream summary: It was discovered that Bleach did not properly sanitize URI attributes containing character entities. An attacker could possibly use this […]